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Japanese Patent Application Laid-Open No. 11-53185 
Date of Laid-Open: February 26, 1999 

[Title of the Invention] 

METHOD OF CHARGING FOR PROGRAM ON THE BASIS OF AMOUNT 
OF USE OF EACH FUNCTION UNIT 
[Abstract ] 

[Objective] To provide a method of charging for a program on 
the basis of amount of use of each function unit , which 
method enables collection of a usage fee which is charged for 
each function of software in proportion to the number of 
times the function has been used. 

[Means for Solution] Before execution of a chargeable 
application, a usage recording module 2 transmits an 
application usage request to a charging server apparatus 3. 
The charging server apparatus 3 transmits an encryption key K 
to the usage recording module 2 . During execution of the 
chargeable application, a check point function 1 generates a 
random number R x , and transmits to the usage recording module 
an activation report to which is attached the random number, 
whenever the check point function 1 is activated. The usage 
recording module updates the number of the activation reports, 
encrypts, by making use of the encryption key K, the random 
number R x received from the check point function, and returns 
the encrypted random number to the check point function. The 
check point function decrypts, by making use of a decryption 
key K', the encrypted random number K(R X ) received from the 



1 



usage recording module, and verifies whether the random 
number R/ coincides with the random number r,. 
[Claims] 

I Claim 1] A method of charging for a program on the basis of 
amount of use of each function unit, the method being adapted 
for a program charging system which includes a usage 
recording module provided in a user processing apparatus 
having a chargeable application, and a charging server 
apparatus which is connected to the user processing apparatus 
via a network, and being characterized in that 

the chargeable application is distributed in a state in 
which a check point function is previously embedded for each 
chargeable function unit; 

the check point function transmits an activation report 
to the usage recording module whenever activated; and 

the usage recording module updates and holds the number 
of the activation reports and transfers the held usage record 
to the charging server apparatus. 

[Claim 2] A method of charging for a program on the basis of 
amount of use of each function unit, described in claim 1 and 
characterized in that 

the check point function transmits to the usage 
recording module an activation report whenever activated, the 
activation report being accompanied by program identification 
information of the chargeable application; and 

the usage recording module updates and holds the number 
of the activation reports for each piece of program 
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identification information, and transmits the held usage 
record to the charging server apparatus . 

[Claim 3] A method of charging for a program on the basis of 
amount of use of each function unit, described in claim 1 or 
2 and characterized in that 

the check point function transmits to the usage 
recording module an activation report whenever activated, the 
activation report being accompanied by a unit price; and 

the usage recording module updates and holds the 
cumulative unit prices , and transmits the held usage record 
to the charging server apparatus . 

[Claim 4] A method of charging for a program on the basis of 
amount of use of each function unit , described in any one of 
claims 1 to 3 and characterized in that 

a decryption key K f is embedded in the check point 
function in advance; 

before execution of the chargeable application, the 
usage recording module transmits an application usage request 
to the charging server apparatus ; 

the charging server apparatus transmits to the usage 
recording module an encryption key K corresponding to the 
decryption key K' ; 

the usage recording module holds the encryption key K 
received from the charging server apparatus; 

during execution of the chargeable application, the 
check point function generates a random number R x and 
transmits to the usage recording module an activation report 
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to which is attached the generated random number Rl , whenever 
the check point function is activated; 

the usage recording module updates and holds the number 
of the activation reports, encrypts, by making use of the 
encryption key K, the random number R, received from the 
check point function, and returns the encrypted random number 
K(RJ to the check point function; 

the check point function decrypts, by making use of the 
decryption key the encrypted random number K( Rl , received 

from the usage recording module, and verifies whether the 
decrypted random number R 1 ' coincides with the generated 
random number R x ■ ; and 

the usage recording module transmits the usage record 
held therein to the charging server apparatus. 
[Claim 5] A method of charging for a program on the basis of 
amount of use of each function unit, described in any one of 
claims 1 to 3 and characterized in that 

a decryption key K' is embedded in the check point 
function in advance; 

before execution of the chargeable application, the 
usage recording module transmits to the charging server 
apparatus an application usage request accompanied by program 
identification information of the chargeable application: 
the charging server apparatus transmits to the usage 
recording module an encryption key K corresponding to the 
decryption key K' embedded in the chargeable application 
designated by the program identification information; 
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the usage recording module holds the encryption key K 
received from the charging server apparatus in such a manner 
that the encryption key K is paired with the program 
identification information ; 

during execution of the chargeable application, the 
check point function generates a random number R x and 
transmits to the usage recording module an activation report 
to which are attached the generated random number R ± and the 
program identification information of the chargeable 
application, whenever the check point function is activated; 

the usage recording module updates and holds the number 
of activation reports for each piece of program 
identification information, encrypts, by making use of the 
encryption key K corresponding to the program identification 
information, the random number R x received from the check 
point function, and returns the encrypted random number K(RJ 
to the check point function; 

the check point function decrypts, by making use of a 
decryption key K', the encrypted random number K( R A ) received 
from the usage recording module, and verifies whether the 
decrypted random number R x ' coincides with the generated 
random number R x ; and 

the usage recording module transmits the usage record 
held therein to the charging server apparatus . 

[Claim 6] A method of charging for a program on the basis of 
amount of use of each function unit, described in any one of 
claims 1 to 3 and characterized in that 
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the usage recording module holds a public key Ks of the 
charging server apparatus, the charging server apparatus 
holds a private key Ks- of the charging server apparatus 



itself; 



the usage recording module holds a usable limit, and 
when the number of times of activation or the cumulative unit 
prices of the check point function reaches the usable limit, 
the usage recording module generates a random number R 2 . 
encrypts the generated random number R 2 and a usage record U 
by making use of the public key Ks of the charging server 
apparatus, and transmits the encrypted information Ks (R 2 , U} 
to the charging server apparatus; 

the charging server apparatus decrypts the encrypted 
information Ks (R 2 . „, received from the usage recording 
module by making use of the private key Ks- of the charging 
server apparatus itself to thereby extract the random number 
R 2 and the usage record U. updates charge information held in 
the charging server apparatus, encrypts the random number R 2 
by making use of the private key Ks- of the charging server 
apparatus itself, transmits the encrypted random number Ks" 
"(RJ to the usage recording module; and 

the usage recording module decrypts, by making use of 
the public key Ks of the charging server apparatus, the 
encrypted random number K S -(R 2 ) received from the charging 
server apparatus, verifies whether the decrypted random 
number R 2 • coincides with the generated random number R 2 , and 
deletes the usage record held in the usage recording module. 
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[Detailed Description of the Invention] 
[0001] 

[Field of the Invention] The present invention relates to a 
method of charging, on the basis of amount of use of each 
function unit, for software that is distributed while being 
stored in a medium such as a CD-ROM or a floppy disk, or 
software that is distributed via a network. 
[0002] 

[Prior Art] A conventional software charging system employs 
a method of charging for a program such that software is sold, 
and the charging is ended when a user purchases the software. 
[0003] In another existing charging system, when a user uses 
distributed software, the user notifies a charging center of 
the use of the software, on the basis of which the charging 
center charges for use of the software. 

[0004] Further, recently, a buying-out scheme has been 
adopted. In this scheme, encrypted software is distributed 
by use of a medium such as a CD-ROM or via a network, and 
after completion of a purchase procedure performed by phone, 
facsimile, letter, or electronic mail, a decryption key is 
provided. Further, there have been other methods, such as a 
method in which software which has been encrypted and for 
which an usable amount has been set is distributed, the 
number of days over which a user uses the software is managed 
as an amount of use, and charging is effected on the basis of 
the number of days . 
[0005] 
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[Problems to be Solved by the Invention] However, when the 
above-described buying-out scheme is employed, a large number 
of functions are incorporated in software in order to reduce 
distribution cost to a relatively low level, and a user must 
pay a large amount of money for functions that the user 
hardly uses. Further, the user cannot judge whether the 
software provides a necessary function unless the user 
purchases and executes the software. 

[0006] Further, sole use of the method in which, before use 
of distributed software, a user notifies a charging center of 
the use of the software raises a problem in that the method 
cannot cope with unpaid usage fees, because the method cannot 
restrict use of the software, although it can charge for use 
of the software. 

[0007] The system in which encrypted software is distributed 
in advance and a decryption key is provided before use of the 
software has a drawback in that, since a user must pay a 
fixed amount of money regardless of the number of times of 
use, price per time of use or per unit time of use varies 
greatly among users. 

[0008] The present invention was accomplished in view of the 
foregoing, and an object of the present invention is to 
provide a method of charging for a program on the basis of 
amount of use of each function unit, which method enables 
collection of a usage fee which is charged for each function 
of software in proportion to the number of times the function 
has been used. 
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[0009] 

[Means to Solve the Problems] In order to achieve the above 
object, the invention described in claim 1 is directed to a 
program charging system which includes a usage recording 
module provided in a user processing apparatus having a 
chargeable application, and a charging server apparatus which 
is connected to the user processing apparatus via a network, 
characterized in that the chargeable application is 
distributed in a state in which a check point function is 
previously embedded for each chargeable function unit; the 
check point function transmits an activation report to the 
usage recording module whenever activated; and the usage 
recording module updates and holds the number of the 
activation reports and transfers the held usage record to the 
charging server apparatus . 

[0010] In the invention described in claim 1, whenever the 
check point function which is previously embedded in a 
chargeable application for each chargeable function unit is 
activated, the check point function transmits an activation 
report to the usage recording module; and the usage recording 
module updates the number of the activation reports and 
transfers the held usage record to the charging server 
apparatus. Therefore, it is possible to charge for each 
chargeable function unit in accordance with the number of 
times of execution of the chargeable function unit. 
[0011] The invention described in claim 2 is characterized 
in that, in the invention of claim 1, the check point 
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function transmits to the usage recording module an 
activation report whenever activated, the activation report 
being accompanied by program identification information of 
the chargeable application; and the usage recording module 
updates and holds the number of the activation reports for 
each piece of program identification information, and 
transmits the held usage record to the charging server 
apparatus . 

[0012] in the invention described in claim 2. the check 
point function transmits to the usage recording module an 
activation report whenever activated, the activation report 
being accompanied by program identification information of 
the chargeable application; and the usage recording module 
updates the number of the activation reports for each piece 
of program identification information, and transmits this 
usage record to the charging server apparatus. Therefore, it 
la Possible for the user to pay usage fee to the proprietor 
of the chargeable application in accordance with the number 
of times of execution of the chargeable function unit, 
through summing up usage records for each chargeable 
application by use of the program identification information. 
10013] The invention described in claim 3 is characterized 
in that, in the invention of claim 1 or 2 , the check point 
function transmits to the usage recording module an 
activation report whenever activated, the activation report 
being accompanied by a unit price; and the usage recording 
module updates and holds the cumulative unit prices, and 
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transmits the held usage record to the charging server 
apparatus . 

[0014] In the invention described in claim 3, the check 
point function transmits to the usage recording module an 
activation report whenever activated, the activation report 
being accompanied by a unit price; and the usage recording 
module updates the cumulative unit prices, and transmits this 
usage record to the charging server apparatus. Therefore, it 
is possible to collect a different fee for use of each 
different chargeable function unit, depending on man-hours 
and know-how needed for developing the function unit, the 
scale, difficulty, and utility of the function unit, through 
setting of a unit price for each different chargeable 
function unit. 

[0015] The invention described in claim 4 is characterized 
in that , in the invention of any one of claims 1 to 3 , a 
decryption key K' is embedded in the check point function in 
advance; before execution of the chargeable application, the 
usage recording module transmits an application usage request 
to the charging server apparatus; the charging server 
apparatus transmits to the usage recording module an 
encryption key K corresponding to the decryption key K' ; the 
usage recording module holds the encryption key K received 
from the charging server apparatus; during execution of the 
chargeable application, the check point function generates a 
random number R x and transmits to the usage recording module 
an activation report to which is attached the generated 
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random number R l# whenever the check point function is 
activated; the usage recording module updates and holds the 
number of the activation reports, encrypts, by making use of 
the encryption key K, the random number R, received from the 
check point function, and returns the encrypted random number 
K(RJ to the check point function; the check point function 
decrypts, by making use of the decryption key K', the 
encrypted random number K( Rl ) received from the usage 
recording module, and verifies whether the decrypted random 
number R, • coincides with the generated random number R 2 • , 
and the usage recording module transmits the usage record 
held therein to the charging server apparatus. 
[0016] in the invention described in claim 4, whenever the 
check point function is activated, the check point function 
generates a random number and transmits it to the usage 
recording module, decrypts the encrypted random number 
returned from the usage recording module, and compares it 
with the original random number for verification. Therefore, 
it is possible to guarantee that a usage record corresponding 
to the number of times of execution of the chargeable 
function unit can be obtained. 

[0017] The invention described in claim 5 is characterized 
in that, in the invention of any one of claims 1 to 3, a 
decryption key K' is embedded in the check point function in 
advance; before execution of the chargeable application, the 
usage recording module transmits to the charging server 
apparatus an application usage request accompanied by program 
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identification information of the chargeable application; the 
charging server apparatus transmits to the usage recording 
module an encryption key K corresponding to the decryption 
key K' embedded in the chargeable application designated by 
the program identification information; the usage recording 
module holds the encryption key K received from the charging 
server apparatus in such a manner that the encryption key K 
is paired with the program identification information; during 
execution of the chargeable application, the check point 
function generates a random number R x and transmits to the 
usage recording module an activation report to which are 
attached the generated random number R x and the program 
identification information of the chargeable application, 
whenever the check point function is activated; the usage 
recording module updates and holds the number of activation 
reports for each piece of program identification information, 
encrypts, by making use of the encryption key K corresponding 
to the program identification information, the random number 
R a received from the check point function, and returns the 
encrypted random number KCR^ to the check point function; 
the check point function decrypts, by making use of a 
decryption key K 1 , the encrypted random number K(R X ) received 
from the usage recording module, and verifies whether the 
decrypted random number R x ' coincides with the generated 
random number R x ; and the usage recording module transmits 
the usage record held therein to the charging server 
apparatus . 
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[0018] In the invention described in claim 5. whenever the 
check point function is activated, the check point function 
generates a random number and transmits it to the usage 
recording module together with program identification 
information; the usage recording module updates the number of 
activation reports for each piece of program identification 
information; and the check point function decrypts the 
encrypted random number returned from the usage recording 
module, and compares it with the original random number for 
verification. Therefore, it is possible to guarantee that a 
usage record corresponding to the number of times of 
execution of the chargeable function unit can be obtained. 
Further, it becomes possible for the user to pay a usage fee 
to the proprietor of the chargeable application in accordance 
with the number of times of execution of the chargeable 
function unit, through summing up of usage records for each 
chargeable application by use of the of program 
identification information. 

[0019] The invention described in claim 6 is characterized 
in that, in the invention of any one of claims 1 to 3, the 
usage recording module holds a public key Ks of the charging 
server apparatus, the charging server apparatus holds a 
private key Ks 1 of the charging server apparatus itself; and 
the usage recording module holds a usable limit, and when the 
number of times of activation or the cumulative unit prices 
of the check point function reaches the usable limit, the 
usage recording module generates a random number R 2 . encrypts 
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the generated random number R 2 and a usage record U by making 
use of the public key Ks of the charging server apparatus, 
and transmits the encrypted information Ks (R 2 , U) to the 
charging server apparatus; the charging server apparatus 
decrypts the encrypted information Ks (R 2 , U) received from 
the usage recording module by making use of the private key 
Ks" 1 of the charging server apparatus itself to thereby 
extract the random number R 2 and the usage record U, updates 
charge information held in the charging server apparatus , 
encrypts the random number R 2 by making use of the private 
key Ks" 1 of the charging server apparatus itself, transmits 
the encrypted random number Ks" 1 (R 2 ) to the usage recording 
module; and the usage recording module decrypts, by making 
use of the public key Ks of the charging server apparatus, 
the encrypted random number Ks" x (R 2 ) received from the 
charging server apparatus, verifies whether the decrypted 
random number R 2 1 coincides with the generated random number 
R 2 , and deletes the usage record held in the usage recording 
module . 

[0020] In the invention described in claim 6, a usage record 
transmitted from the usage recording module to the charging 
server apparatus and a usage-record receipt acknowledgement 
transmitted from the charging server apparatus to the usage 
recording module are encrypted by use of a public -key 
cryptosystem, and, for each time, a different random number 
is generated and attached to the usage record and the usage - 
record receipt acknowledgment. Therefore, it becomes 
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possible to guarantee that the usage record has been 
transferred to the charging server apparatus without fail. 
[0021] 

[Embodiment of the Invention] Hereinbelow. an embodiment of 
the present invention will be described with reference to the 
drawings . 

[0022] FIG. 1 is a diagram showing the configuration of a 
system which implements the method of charging for a program 
on the basis of amount of use of each function unit, 
according to the embodiment of the present invention. As 
shown in FIG. 1. a distributed application 7 to be charged 
(chargeable application) is provided in a user processing 
apparatus 5. A plurality of check point functions 1 are 
embedded in the chargeable application 7 in advance such that 
one check point function 1 is provided for each function unit 
to be charged (chargeable function unit), in addition, a 
usage recording module 2 is provided adjacent to the 
chargeable application 7. Moreover, a charging server 
apparatus 3 is connected to the user processing apparatus 5 
via a network. 

[0023] FIG. 2 shows a block diagram showing the system of 
FIG. 1 in more detail. As shown in FIG. 2, the check point 
function 1 includes random-number generation means 101 for 
generating a random number; activation -report transmission 
means 102 for reporting activation of the check point 
function 1 to the usage recording module 2; encrypted- random- 
number reception means 103 for receiving an encrypted random 
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number from the usage recording module 2; decryption means 
104 for decrypting the encrypted random number; and random- 
number detection means 105 for checking whether the decrypted 
random number coincides with the above -described generated 
random number . 

[0024] The usage recording module 2 includes usage-request 
transmission means 201 for transmitting to the charging 
server apparatus 3 a request for using the chargeable 
application 7; encryption-key reception means 202 for 
receiving from the charging server apparatus 3 an encryption 
key corresponding to the chargeable application 7 ; 
encryption-key holding means 203 for holding the encryption 
key; activation-report reception means 204 for receiving an 
activation report from the check point function 1; record 
management means 205 for managing a usage record; encryption 
means 206 for encrypting a random number and the usage 
record; encrypted- random- number transmission means 207 for 
transmitting the encrypted random number to the check point 
function 1; random-number generation means 208 for generating 
the random number; usage-record transmission means 209 for 
transmitting the usage record to the charge server apparatus 
3; encrypted- random- number reception means 210 for receiving 
an encrypted random number from the charge server apparatus 
3; decryption means 211 for decrypting the encrypted random 
number; and random-number verification means 212 for 
verifying whether the decrypted random number coincides with 
the above-described generated random number. 
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[0025] The charging server apparatus 3 includes usage- 
request reception means 301 for receiving from the usage 
recording module 2 the request for using the chargeable 
application 7; encryption -key transmission means 302 for 
transmitting to the usage recording module 2 an encryption 
key corresponding to the chargeable application 7; usage- 
record reception means 303 for receiving the usage record 
from the usage recording module 2; decryption means 304 for 
decrypting the encrypted random number and usage record ; 
charging-information update means 305 for updating charging 
information held in the charging server apparatus 3; 
encryption means 306 for encrypting a random number; and 
encrypted-random-number transmission means 307 for 
transmitting the encrypted random number to the usage 
recording module 2. 

[0026] m the system which has the above -described 
configuration and which implements the method of charging for 
a program on the basis of amount of use of each function unit, 
before execution of the chargeable application 7, the usage- 
request transmission means 201 in the usage recording module 
2 transmits an application usage request to the charging 
server apparatus 3 together with a program ID of the 
chargeable application 7. in the charging server apparatus 3, 
the usage-request reception means 301 receives from the usage 
recording module 2 the application usage request accompanied 
by the program ID; and the encryption -key transmission means 
302 transmits to the usage recording module 2 an encryption 
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key K corresponding to the program ID. In the usage 
recording module 2, the encryption-key reception means 202 
receives the encryption key K from the charging server 
apparatus 3; and the encryption-key holding means 203 holds 
the encryption key K. 

[0027] When the check point function 1 which is embedded 

in the chargeable application 7 for each chargeable 

function is activated during execution of the chargeable 

application 7 , within the check point function 1 the random- 
number generation means 101 generates a random number R^* and 
the activation-report transmission means 102 transmits to the 
usage recording module 2 an activation report to which is 
attached the generated random number R lr the program ID of 
the chargeable application 7, and a unit price of the 
chargeable function unit. 

[0028] In the usage recording module 2, the activation- 
report reception means 204 receives from the check point 
function 1 the activation report accompanied by the generated 
random number R lf the program ID, and the unit price; the 
record management means 205 updates the cumulative unit 
prices corresponding to the program ID by the unit price; the 
encryption means 206 encrypts the random number R x , by making 
use of the encryption key K corresponding to the program ID 
held in the encryption-key holding means 203; and the 
encrypted-random- number transmission means 207 transmits the 
encrypted random number KCR^ to the check point function 1. 
[0029] In the check point function 1, the encrypted- random - 
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number reception means 103 receive, the encrypted ran*™ 
number K( Rl ) f rom the usage recording module 2; the 
decryption means !04 decrypts the encrypted random number 
K(R.) by making use of a decryption key K ' which has been 
embedded in the check point function i i n advance.- and the 
random-number verification means 105 verifies whether the 
decrypted random number coincides with the generated 
random number R x . 

[0030, When the cumulative unit prices held in the record 
management means 205 of the usage recording module 2 reach a 
preset usable limit, in the usage recording module 2 the 
random-number generation means 208 generates a random number 
R,: the encryption means 206 encrypts the generated random 
number R 2 and a usage record U held in the record management 
means 205. by making use of a public key Ks of the charging 
server apparatus 3 held in the usage recording module 2; and 
the usage-record transmission means 209 transmits the 

encrypted information ( r 4- ^ 

on Ks (R 2- u ) to the charging server 

apparatus 3. 

10031, Ia the charging server apparatus 3. the usage-record 
reception means 303 receives the encrypted information Ks <R, 
U) from the usage recording module 2: the decryption means 
304 decrypts the encrypted information Ks <*,. „, by raaklng 
use of a private key Ks- of the charging server apparatus 3 
held therein to thereby extract the random number R ; and the 
usage record U; the charging-information update means 305 
updates the charge information on the basis of the usage 
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record U; the encryption means 306 encrypts the random number 
R 2 by making use of the private key Ks' 1 ; and the encrypted- 
random-number transmission means 30 7 transmits the encrypted 
random number Ks* 1 (R 2 ) to the usage recording module 2. 
[0032] In the usage recording module 2, the encrypted- 
random-number reception means 210 receives the encrypted 
random number Ks _1 (R 2 ) from the charging server apparatus 3; 
the decryption means 211 decrypts the encrypted random number 
Ks _1 (R 2 ) by making use of the public key Ks ; the random- number • 
verification means 212 verifies whether the decrypted random 
number R 2 1 coincides with the generated random number R 2 ; and 
the record management means 205 deletes the usage record U. 
[0033] Next, the operation will be described in detail with 
reference to the flowcharts shown in FIGS. 3 to 5 . 
[0034] FIG. 3 is a flowchart showing processing performed in 
a preparation stage preceding to execution of a chargeable 
application in the present embodiment . In the usage 
recording module 2, the usage-request transmission means 201 
transmits an application usage request to the charging server 
apparatus 3 together with the program ID of the chargeable 
application (step Sll). In the charging server apparatus 3, 
the usage-request reception means 301 receives from the usage 
recording module 2 the application usage request accompanied 
by the program ID (step S13); and the encryption-key 
transmission means 302 transmits to the usage recording 
module 2 an encryption key corresponding to the program ID 
(step S15). In the usage recording module 2, the encryption - 
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key reception means 202 receives the encryption key K from 
the charging server apparatus 3 (step S17); and the 
encryption-key holding means 203 holds the encryption key K 
(step S19) . 

o 

[0035] FIG. 4 is a flowchart showing processing performed 
when a check point function is activated during execution of 
the- chargeable application in the present embodiment. In the 
check point function 1. the random-number generation means 
101 generates a random number R, (step S21); and the 
activation-report transmission means 102 transmits to the 
usage recording module 2 an activation report to which is 
attached the generated random number r 1# the program ID of 
the chargeable application 7, and a unit price of the 
chargeable function unit (step S23). 

[0036] m the usage recording module 2, the activation- 
report reception means 204 receives from the check point 
function 1 the activation report accompanied by the random 
number R x , the program ID. and the unit price (step S25); the 
record management means 205 updates the cumulative unit 
prices corresponding to the program ID by the unit price 
(step S27); the encryption means 206 encrypts the random 
number Rl , by making use of the encryption key K 
corresponding to the program ID held in the encryption-key 
holding means 203 (step S29); and the encrypted-random-number 
transmission means 207 transmits the encrypted random number 
K(RJ to the check point function 1 (step S31). 

10037] In the check point f unrt-i <-.n i 

^ 1 ^unction 1, the encrypted-random- 
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number reception means 103 receives the encrypted random 
number K(R X ) from the usage recording module 2 (step S33); 
the decryption means 104 decrypts the encrypted random number 
K(R L ) by making use of a decryption key K f which has been 
embedded in the check point function 1 in advance (step s35); 
and the random-number verification means 105 verifies whether 
the decrypted random number Rj/ coincides with the generated 
random number R x (step S37). 

[0038] FIG. 5 is a flowchart showing processing performed 
when the cumulative unit prices held in the record management 
means 205 of the usage recording module 2 reach the preset 
usable limit in the present embodiment . In the usage 
recording module 2, the random-number generation means 208 
generates a random number R 2 (step S41); the encryption means 
206 encrypts the generated random number R 2 and a usage 
record U held in the record management means 205, by making 
use of a public key Ks of the charging server apparatus 3 
held in the usage recording module 2 (step S43); and the 
usage-record transmission means 209 transmits the encrypted 
information Ks (R 2 , U) to the charging server apparatus 3 
(step S45) . 

[0039] In the charging server apparatus 3, the usage-record 
reception means 303 receives the encrypted information Ks (R 2 , 
U) from the usage recording module 2 (step S47); the 
decryption means 304 decrypts the encrypted information Ks 
(R 2 , U) by making use of a private key Ks" 1 of the charging 
server apparatus 3 held therein to thereby extract the random 
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number R 2 and the usage record U (step S49); the charging- 
information update means 305 updates the charge information 
on the basis of the usage record U (step S51) ; and the 
encryption means 306 encrypts the random number R 2 by making 
use of the private key Ks> (step S53); and the encrypted- 
random-number transmission means 307 transmits the encrypted 
random number Ks-(R 2 ) to the usage recording module 2 (step 
S55) . 

[0040] m the usage recording module 2, the encrypted- 

random-number reception means 210 receives the encrypted 

random number Ks-(R 2 ) from the charging server apparatus 3 

(step S57); the decryption means 211 decrypts the encrypted 

random number Ks-(R 2 ) by making use of the public key Ks 

(step S59); the random-number verification means 212 verifies 

whether the decrypted random number R 2 - coincides with the 

generated random number R 2 (step S61); and the record 

management means 205 deletes the usage record U (step S63). 
[0041] 

[Effects of the Invention] 

As described above, according to the present invention, 
whenever the check point function which is previously 
embedded in a chargeable application for each chargeable 
function unit is activated, the check point function 
transmits an activation report to the usage recording module; 
and the usage recording module updates the number of the 
activation reports and transfers this usage record to the 
charging server apparatus. Therefore, it is possible to 
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charge for each chargeable function unit in accordance with 
the number of times of execution of the chargeable function 
unit. 

[004 2] Further, according to the present invention, the 
check point function transmits to the usage recording module 
an activation report whenever activated, the activation 
report being accompanied by program identification 
information of the chargeable application; and the usage 
recording module updates the number of the activation reports 
for each piece of program identification information, and 
transmits this usage record to the charging server apparatus. 
Therefore it is possible for the user to pay usage fee to the 
proprietor of the chargeable application in accordance with 
the number of times of execution of the chargeable function 
unit, through summing up usage records for each chargeable 
application by use of the program identification information . 
[004 3] Further, according to the present invention, the 
check point function transmits to the usage recording module 
an activation report whenever activated, the activation 
report being accompanied by a unit price; and the usage 
recording module updates the cumulative unit prices, and 
transmits this usage record to the charging server apparatus. 
Therefore, it is possible to collect a different fee for use 
of each different chargeable function unit, depending on man- 
hours and know-how needed for developing the function unit, 
the scale, difficulty, and utility of the function unit, 
through setting of a unit price for each different chargeable 
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function unit. 

[0044] Further, according to the present invention, whenever 
the check point function is activated, the check point 
function generates a random number and transmits it to the 
usage recording module, decrypts the encrypted random number 
returned from the usage recording module, and compares it 
with the original random number for verification. Therefore, 
it is possible to guarantee that a usage record corresponding 
to the number of times of execution of the chargeable 
function unit can be obtained. 

[0045] Further, according to the present invention, whenever 
the check point function is activated, the check point 
function generates a random number and transmits it to the 
usage recording module together with program identification 
information of the chargeable application; the usage 
recording module updates the number of activation reports for 
each piece of program identification information; and the 
check point function decrypts the encrypted random number 
returned from the usage recording module, and compares it 
with the original random number for verification. Therefore, 
it is possible to guarantee that a usage record corresponding 
to the number of times of execution of the chargeable 
function unit can be obtained. Further, it becomes possible 
for the user to pay a usage fee to the proprietor of the 
chargeable application in accordance with the number of times 
of execution of the chargeable function unit, through summing 
up of usage records for each chargeable application by use of 
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the of program identification information. 

[0046] Further, according to the present invention, a usage 
record transmitted from the usage recording module to the 
charging server apparatus and a usage-record receipt 
acknowledgement transmitted from the charging server 
apparatus to the usage recording module are encrypted by use 
of a public-key cryptosystem, and, for each time, a different 
random number is generated and attached to the usage record 
and the usage-record receipt acknowledgment. Therefore, it 
becomes possible to guarantee that the usage record has been 
transferred to the charging server apparatus without fail. 
[Brief Description of the Drawings] 

[FIG. 1] Diagram showing the configuration of a system which 
implements the method of charging for a program on the basis 
of amount of use of each function unit, according to the 
embodiment of the present invention. 

[FIG. 2] Block diagram showing the system of FIG. 1 in more 
detail . 

[FIG. 3] Flowchart showing processing performed in a 
preparation stage preceding to execution of a chargeable 
application in the embodiment shown in FIG. 1. 

[FIG. 4] Flowchart showing processing performed when a check 
point function is activated during execution of the 
chargeable application in the embodiment shown in FIG. 1. 
[FIG. 5] Flowchart showing processing performed when the 
cumulative unit prices held in the record management means of 
the usage recording module reaches the preset usable limit in 
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the embodiment shown in FIG. 1. 

[Description of Reference Numerals] 

1: check point function 

2: usage recording module 

3: charging server apparatus 

5: user processing apparatus 

7: chargeable application 

101: random-number generation means 

102: activation-report transmission means 

105: random-number verification means 

201: usage-request transmission means 

202: encryption -key reception means 

204: activation-report reception means 

205: record management means 

209: usage-record transmission means 

212: random-number verification means 

301: usage-request reception means 

302: encryption-key transmission means 

307: encrypted-random-number transmission means 
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FIG. 1 

1: CHECK POINT FUNCTION 
2: USAGE RECORDING MODULE 
3: CHARGING SERVER APPARATUS 
5: USER PROCESSING APPARATUS 
7: CHARGEABLE APPLICATION 

FIG- 2 

1: CHECK POINT FUNCTION 

2: USAGE RECORDING MODULE 

3: CHARGING SERVER APPARATUS 

101: RANDOM-NUMBER GENERATION MEANS 

102: ACTIVATION-REPORT TRANSMISSION MEANS 

103: ENCRYPTED -RANDOM- NUMBER RECEPTION MEANS 

104: DECRYPTION MEANS 

105: RANDOM-NUMBER VERIFICATION MEANS 
201: USAGE-REQUEST TRANSMISSION MEANS 
202: ENCRYPTION-KEY RECEPTION MEANS 
203: ENCRYPTION-KEY HOLDING MEANS 
204: ACTIVATION -REPORT RECEPTION MEANS 
205: RECORD MANAGEMENT MEANS 
206: ENCRYPTION MEANS 

207: ENCRYPTED -RANDOM- NUMBER TRANSMISSION MEANS 

208: RANDOM-NUMBER GENERATION MEANS 

209: USAGE-RECORD TRANSMISSION MEANS 

210: ENCRYPTED -RANDOM-NUMBER RECEPTION MEANS 

211: DECRYPTION MEANS 
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212: RANDOM - NUMBER VERIFICATION MEANS 
301: USAGE - REQUEST RECEPTION MEANS 
302: ENCRYPTION-KEY TRANSMISSION MEANS 
303: USAGE -RECORD RECEPTION MEANS 
304: DECRYPTION MEANS 

305: CHARGING- INFORMATION UPDATE MEANS 
306: ENCRYPTION MEANS 

307: ENCRYPTED-RANDOM-NUMBER TRANSMISSION MEANS 
FIG. 3 

1: CHECK POINT FUNCTION 

2: USAGE RECORDING MODULE 

3: CHARGING SERVER APPARATUS 

Sll: TRANSMIT USAGE REQUEST (PROGRAM ID ATTACHED) 
S13: RECEIVE USAGE REQUEST ( PROGRAM ID ATTACHED) 
S15: TRANSMIT ENCRYPTION KEY K 
S17: RECEIVE ENCRYPTION KEY K 
SI 9: HOLD ENCRYPTION KEY K 

FIG. 4 

1: CHECK POINT FUNCTION 

2: USAGE RECORDING MODULE 
3: CHARGING SERVER APPARATUS 
S21: GENERATE RANDOM NUMBER R x 

S23= TRANSMIT ACTZVATION REPORT ( RANDOM NUMBER R, . PROGRAM „ 
AND UNIT PRICE ATTACHED) 

S25: RECEIVE ACTUATION REPORT ( RANDOM NUMBER R, . PROGRAM ID . 
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AND UNIT PRICE ATTACHED) 

S27: UPDATE CUMULATIVE UNIT PRICES 

S2 9: ENCRYPT RANDOM NUMBER R x (ENCRYPTION KEY K) 
S31: TRANSMIT ENCRYPTED RANDOM NUMBER K(RJ 
S3 3: RECEIVE ENCRYPTED RANDOM NUMBER K(RJ 

S35: DECRYPT ENCRYPTED RANDOM NUMBER K(RJ (DECRYPTION KEY 
K' ) 

S37: VERIFY COINCIDENCE BETWEEN DECRYPTED RANDOM NUMBER R x • 
AND GENERATED RANDOM NUMBER R x 

FIG. 5 

1: CHECK POINT FUNCTION 

2: USAGE RECORDING MODULE 

3: CHARGING SERVER APPARATUS 

S41: GENERATE RANDOM NUMBER R 2 

S43: ENCRYPT RANDOM NUMBER R 2 AND USAGE RECORD U (PUBLIC KEY 
Ks) 

S45: TRANSMIT ENCRYPTED INFORMATION Ks (R 2 , U) 
S47: RECEIVE ENCRYPTED INFORMATION Ks (R 2 , U) 

S4 9: DECRYPT ENCRYPTED INFORMATION Ks (R 2 , U) (PRIVATE KEY 
Ks- 1 

S51: UPDATE CHARGING INFORMATION 

S53: ENCRYPT RANDOM NUMBER R 2 (PRIVATE KEY Ks" 1 ) 
S55: TRANSMIT ENCRYPTED RANDOM NUMBER Ks" 1 (R 2 ) 
S57: RECEIVE ENCRYPTED RANDOM NUMBER Ks" 1 ^) 

S59: DECRYPT ENCRYPTED RANDOM NUMBER Ks'^R,) (PUBLIC KEY Ks ) 
S61: VERIFY COINCIDENCE BETWEEN DECRYPTED RANDOM NUMBER R 2 ' 
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AND GENERATED RANDOM NUMBER R 2 
S63: DELETE USAGE RECORD U 
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